General

  • Target
    EssentialUI_v2.67.866.exe
  • Size 85.1MB
  • Sample260820-e553nazbpa
  • SHA256 24e810930b09cc641caa45f69ff769b1b508c5fd9ade2aab0c49d02ba2cbdd15
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • EssentialUI_v2.67.866.exe
    .exe 85.1MB

EssentialUI_v2.67.866.exe

  • IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
  • SHA256 24e810930b09cc641caa45f69ff769b1b508c5fd9ade2aab0c49d02ba2cbdd15
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

Password
dawda

PE Signature issue

Digest
9d:9c:a0:68:4a:cc:25:dc:73:fe:e5:26:d6:8b:c1:29:7d:8f:13:dc:8a:c4:96:91:32:94:90:0f:5b:60:e0:79
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Veylora Labs,O=Veylora Labs,C=US
Minor OS version
1
Major OS version
6
Entry point
389728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths